
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json)
Hash identifier: V350KjFH84MB3ydbZxrNAa/RS/WY0ImHNnRabA3MkQ0=
Subject key identifier: 23:1A:10:3B:B6:62:FC:FC:93:D2:11:59:FE:5C:54:5C:DE:84:69:C3
Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3
Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
Manifest number: 48
Signing time: Sun 05 Apr 2026 07:40:59 +0000
Manifest this update: Sun 05 Apr 2026 07:40:59 +0000
Manifest next update: Sun 12 Apr 2026 07:40:59 +0000
Files and hashes: 1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: tJ2gmFxSEQ69esnq0oDaFmWkIV+W1LGKpxAN32hKwy4=)
2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: PoRqLZ1iDKniKKiDSN0IaMYeEcnEhdUqkDtLadUJ/NE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl
rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3
Validity
Not Before: Apr 5 07:40:59 2026 GMT
Not After : Apr 12 07:40:59 2026 GMT
Subject: CN=69d2120b-8716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:de:30:0b:3e:f8:18:ce:7c:76:99:ad:e4:
f2:d2:09:c9:9f:49:93:40:01:8d:15:49:3a:ba:78:
cf:df:34:00:ae:4d:96:a8:e0:bf:ef:8c:f4:b4:71:
16:f3:18:a7:5d:7f:28:cb:ff:52:5a:00:51:98:e2:
64:7f:67:fb:51:32:3c:a9:5a:c2:14:75:0a:a5:1a:
43:20:c3:ef:90:3e:b6:a8:71:4e:db:0f:94:34:53:
03:4f:f7:9e:b8:93:ca:78:d9:ed:dc:90:dc:cd:52:
b7:a6:b0:43:40:64:f3:f3:bd:d8:56:88:c7:0e:4d:
4a:ce:ac:95:30:d0:61:4e:e9:5d:ed:3e:1b:d9:c6:
c9:95:79:0e:b1:76:81:6f:4a:dc:59:01:bd:14:bf:
ef:64:86:8c:f4:e3:f9:98:df:ac:2b:60:c1:78:6c:
c0:b2:67:e5:84:71:f8:53:93:21:70:a0:e7:fa:04:
01:a2:92:fa:a7:81:b8:d5:d3:0e:12:5a:a3:9d:a5:
ac:82:64:5c:c7:9e:61:94:1d:3b:9b:e9:73:9f:55:
d6:66:3b:71:4e:c9:b5:ee:47:04:ed:82:cb:1b:97:
db:ca:93:19:12:33:08:ba:c0:f8:40:35:f7:8e:7e:
38:de:dc:48:ec:64:f1:5c:42:94:0e:b0:00:67:02:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:10:3B:B6:62:FC:FC:93:D2:11:59:FE:5C:54:5C:DE:84:69:C3
X509v3 Authority Key Identifier:
keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:75:df:aa:d6:9c:ba:fb:73:3d:1a:62:6c:05:9f:f7:59:5f:
3f:bd:c2:40:55:05:e7:48:eb:15:50:5f:b5:fe:a1:39:61:ad:
83:b6:37:ee:da:05:10:f2:89:46:79:7a:fe:0b:d5:7e:13:68:
1e:d2:98:1e:26:10:db:24:70:e9:51:c6:0f:19:b8:b6:0c:29:
96:22:d9:55:41:bd:ca:59:a4:a8:7a:2e:1b:de:f3:36:cb:a7:
a0:e7:26:40:33:b8:f4:4e:3c:6f:5b:f2:71:32:87:5a:7a:b1:
27:bb:73:a2:41:8d:65:d7:92:ff:49:f0:53:a2:90:cd:c4:9a:
7e:24:0a:c9:4d:6a:76:a7:5e:e0:1e:37:46:33:a3:38:59:bb:
66:c0:1f:77:90:95:65:1e:06:16:1a:77:4b:8e:3f:49:c4:9f:
03:ca:e9:7d:02:31:ca:65:c9:07:69:9c:c0:32:b4:8b:f9:ea:
6a:27:9d:01:51:e6:d2:eb:dd:52:08:3f:49:fb:50:c9:7c:33:
1c:ce:24:dd:a9:d9:17:50:1f:3e:d8:a1:b0:39:b7:ab:31:ab:
9d:91:df:5e:bc:f4:78:89:82:a7:fa:58:dd:82:ea:8a:37:4f:
23:b4:6b:45:20:ef:dd:43:ca:e5:3a:39:55:56:25:06:e1:eb:
f5:4c:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:44 2026 by rpki-client